Controlled environment

Controlled environment is not a formal regulatory term. In Deva's usage it means a computing environment whose policies restrict data egress, model access, or third-party software, for example classified systems, air-gapped enclaves, and systems handling CUI, ePHI, or cardholder data. The specific restrictions come from each environment's own authorization or policy, not from a single standard.